How Canadian agencies are embracing AI tools to defend national security

The national spy watchdog is reviewing the use and governance of artificial intelligence by Canada’s security agencies.

Chinese state hackers use rootkit to hide ToneShell malware activity

A new sample of the ToneShell backdoor, typically seen in Chinese cyberespionage campaigns, has been delivered through a kernel-mode loader in attacks against government organizations.
IEEE

Enhancing Dynamic Malware Behavior Analysis Through Novel Windows Events With Machine Learning

Abstract: Malware analysis involves studying harmful software to understand its behavior and find ways to detect and prevent it. As cyberattacks become more advanced, this process becomes increasingly ...
Bleeping Computer

CISA warns of Chinese "BrickStorm" malware attacks on VMware servers

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned network defenders of Chinese hackers backdooring VMware vSphere servers with Brickstorm malware. In a joint malware analysis ...
EurekAlert!

Process monitoring of P-GMAW-based wire arc direct energy deposition of stainless steels via time-frequency domain analysis and Isolation Forest

AI-driven process monitoring enhances the qualification of additively manufactured stainless-steel parts. By analysing high-frequency welding current and voltage signals in both the time and frequency ...
Ars Technica

5 AI-developed malware families analyzed by Google fail to work and are easily detected

Google on Wednesday revealed five recent malware samples that were built using generative AI. The end results of each one were far below par with professional malware development, a finding that shows ...
GitHub

Automated Malware Monitoring & AI Integration

This project is a Streamlit-based Security Operations Center (SOC) dashboard for real-time malware and system anomaly monitoring. It combines OS/process/network/file monitoring with a pretrained ...
Homeland Security Today

CISA Announces Release of Thorium for Malware Analysis

The Cybersecurity and Infrastructure Security Agency (CISA), in partnership with Sandia National Laboratories, has announced the release of Thorium, an automated, scalable malware and forensic ...
CSOonline

CISA releases Thorium, an open-source, scalable platform for malware analysis

The US Cybersecurity and Infrastructure Security Agency (CISA) has released Thorium, a high-throughput open-source platform for automated malware and forensic file analysis. Developed in partnership ...
Executive Gov

CISA Announces Availability of Malware, Forensic Analysis Platform

The Cybersecurity and Infrastructure Security Agency has released a new open-source malware and forensic analysis platform designed to help analysts automate large-scale threat detection. Developed in ...
Dark Reading

CISA Releases Free Thorium Malware Analysis Tool

The Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with the Department of Energy's Sandia National Laboratories, has released Thorium, an automated malware and forensic ...
AFCEA

CISA Launches Automated Malware Analysis Platform

To help cyber defenders automate workflows at scale, the Cybersecurity and Infrastructure Security Agency (CISA) has announced its launch of a new file analysis platform. Named Thorium, the platform ...